Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/15/2E691E5E8FD0150777299D0461FEE88C1E6A715C.mft
File:                     2E691E5E8FD0150777299D0461FEE88C1E6A715C.mft (raw, json)
Hash identifier:          O/ZdzVXO/iWW/lXq0ROjLzlofY6vMjCkh8w97IG+o20=
Subject key identifier:   32:A2:6D:A7:C0:05:FB:03:A2:D4:D1:5F:0A:19:2D:A1:F2:42:EB:E3
Authority key identifier: 2E:69:1E:5E:8F:D0:15:07:77:29:9D:04:61:FE:E8:8C:1E:6A:71:5C
Certificate issuer:       /CN=2e691e5e8fd0150777299d0461fee88c1e6a715c
Certificate serial:       482F7392BAEFF41E9B2618E48B64F91B6CB2B437
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmkeXo_QFQd3KZ0EYf7ojB5qcVw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/15/2E691E5E8FD0150777299D0461FEE88C1E6A715C.mft
Manifest number:          0325
Signing time:             Wed 26 Jun 2024 01:58:37 +0000
Manifest this update:     Wed 26 Jun 2024 01:53:37 +0000
Manifest next update:     Thu 27 Jun 2024 05:22:37 +0000
Files and hashes:         1: 2E691E5E8FD0150777299D0461FEE88C1E6A715C.crl (hash: O65n19oAzySU56+yWP+sDeRi1unjvRdzqe/28a+RX4U=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/15/2E691E5E8FD0150777299D0461FEE88C1E6A715C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/15/2E691E5E8FD0150777299D0461FEE88C1E6A715C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmkeXo_QFQd3KZ0EYf7ojB5qcVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:2f:73:92:ba:ef:f4:1e:9b:26:18:e4:8b:64:f9:1b:6c:b2:b4:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e691e5e8fd0150777299d0461fee88c1e6a715c
        Validity
            Not Before: Jun 26 01:53:37 2024 GMT
            Not After : Jun 27 05:22:37 2024 GMT
        Subject: CN=32A26DA7C005FB03A2D4D15F0A192DA1F242EBE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c3:ab:7d:14:88:8d:26:1c:fd:f0:e8:1d:50:
                    44:99:7c:84:32:af:9a:6f:80:19:cc:c3:43:a2:17:
                    e9:93:4e:cd:18:2b:dc:ed:7b:a2:0f:97:a6:5d:87:
                    3d:d5:b7:a2:99:b9:a6:01:f7:fd:3b:03:90:09:c8:
                    86:79:bc:2a:cd:cd:f1:62:0e:98:aa:c1:81:0a:26:
                    b7:3a:ac:ad:33:38:44:ee:49:77:24:23:a8:4e:d8:
                    16:43:0a:9b:ed:1f:54:70:17:48:d9:f0:0e:90:82:
                    05:d3:10:c9:de:26:cd:22:43:d7:f4:eb:95:06:9a:
                    16:e9:18:86:6f:72:33:82:e0:8d:e9:4e:66:f0:a0:
                    84:33:b2:c3:25:e5:bc:30:df:50:ef:5b:fa:ba:a6:
                    31:93:51:70:97:c1:61:10:67:b3:a2:53:73:0e:5c:
                    03:0f:3d:d9:a8:d8:be:8a:d7:2a:a4:a4:f8:a9:ce:
                    99:b3:a6:bf:d2:6b:78:e6:8e:bd:91:66:b5:a0:7b:
                    66:74:6c:34:9e:d5:41:f3:c6:f8:6c:0d:71:ad:3e:
                    38:aa:1c:e6:7f:9a:03:89:6c:ce:cc:e0:07:89:24:
                    a6:52:2b:f0:82:63:78:36:79:7e:bb:96:23:40:32:
                    42:d2:3c:31:d4:d3:bf:26:61:f5:c1:4f:73:9d:dc:
                    e4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A2:6D:A7:C0:05:FB:03:A2:D4:D1:5F:0A:19:2D:A1:F2:42:EB:E3
            X509v3 Authority Key Identifier:
                keyid:2E:69:1E:5E:8F:D0:15:07:77:29:9D:04:61:FE:E8:8C:1E:6A:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/15/2E691E5E8FD0150777299D0461FEE88C1E6A715C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmkeXo_QFQd3KZ0EYf7ojB5qcVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/15/2E691E5E8FD0150777299D0461FEE88C1E6A715C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f9:fa:da:28:4e:40:0d:97:10:80:4b:16:c3:84:52:9c:0b:
         c5:fc:15:d1:4b:de:b7:73:65:0f:96:e8:08:16:c0:23:79:9f:
         f6:d8:1e:62:21:c8:51:8f:62:b0:9a:8a:ea:70:d7:ff:71:e0:
         1c:90:bf:9d:79:29:2b:40:f1:88:64:30:cf:ec:9b:8d:85:32:
         bd:af:29:e6:de:56:68:78:ca:18:95:0f:7d:46:ef:99:b0:65:
         16:6f:61:16:12:4c:23:8e:6d:bf:4b:44:7b:74:3e:39:d1:8b:
         4b:9a:11:8f:91:22:f1:06:b8:9a:db:74:dd:bb:7b:2b:13:28:
         35:24:78:ff:22:f7:e6:f1:5e:91:62:88:95:21:0f:45:79:86:
         63:b5:bc:3e:49:3e:86:d8:70:e7:6a:61:30:c0:85:58:35:43:
         04:62:36:fe:57:05:83:e7:0d:83:f9:b2:94:3e:af:43:26:e0:
         46:55:6d:4b:30:b8:a7:e9:41:1a:2b:d2:fe:2a:5f:ae:4c:86:
         ea:e7:2a:98:2f:fc:98:c3:cf:bf:38:a4:50:6f:67:38:5d:8c:
         57:81:62:30:36:e4:f6:e1:43:3e:78:2a:45:2b:06:0c:47:2c:
         81:c0:9d:3e:2a:77:ec:d9:a0:c1:c0:b0:11:ff:bd:82:8d:b5:
         5e:39:50:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:30:24 2024 by rpki-client on console.sobornost.net